Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/1-eHZD-xQKN3NGnUiR25pirzpvsw.roa
File: 1-eHZD-xQKN3NGnUiR25pirzpvsw.roa (raw, json)
Hash identifier: e0tFt/72tAawcUoFsCnOZxDcZxrBCULwC89DLYBH8rk=
Subject key identifier: F9:E1:D9:0F:EC:50:28:DD:CD:1A:75:22:47:6E:69:8A:BC:E9:BE:CC
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 2CE7E4EA
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/1-eHZD-xQKN3NGnUiR25pirzpvsw.roa
Signing time: Sun 15 May 2022 10:43:41 +0000
ROA not before: Sun 15 May 2022 10:43:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12975
IP address blocks: 213.244.121.0/24 maxlen: 24
103.196.120.0/22 maxlen: 22
103.215.4.0/22 maxlen: 22
139.190.176.0/20 maxlen: 20
213.244.71.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.70.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
213.244.72.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.76.0/24 maxlen: 24
83.244.75.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
83.244.79.0/24 maxlen: 24
103.206.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753394922 (0x2ce7e4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: May 15 10:43:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9e1d90fec5028ddcd1a7522476e698abce9becc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:2e:2e:cf:a3:1a:86:60:56:c1:08:2d:b7:
69:ca:c1:66:10:77:4b:2c:0a:e1:e1:f5:44:79:13:
4c:69:ab:aa:f4:3d:53:f4:c4:fe:81:a6:a1:66:36:
0c:96:29:29:e9:11:81:5d:30:2b:6c:c4:35:16:72:
ea:31:19:b5:32:0f:82:b8:3b:f5:48:91:fe:11:63:
ad:b5:b1:68:fa:96:11:3b:50:c1:ab:46:5a:f6:b7:
38:a1:b2:ef:e8:78:29:de:96:33:95:3e:2e:66:9f:
57:e4:56:38:47:70:76:cf:44:4c:f8:31:1e:8b:10:
19:5f:93:27:cc:9f:69:da:23:de:fd:94:37:2e:f3:
53:a3:ce:c1:de:84:ac:c9:dd:5a:0e:63:75:b6:e7:
cf:44:7a:19:42:15:bf:4f:6c:91:4f:99:41:3f:b9:
e1:5a:98:32:2e:a5:1d:ad:c0:8f:1f:f0:1a:b8:78:
ac:83:e6:17:a7:73:23:16:5e:bd:e1:54:33:b1:5a:
58:e6:67:ee:0b:18:a7:62:04:da:f6:27:b4:db:a1:
c6:af:9a:7c:ed:6b:48:17:43:17:32:f5:30:b4:13:
42:15:7d:f5:2d:ab:0b:0b:b6:00:21:cf:9e:7e:a0:
ed:71:63:56:8d:7f:d6:3c:89:1c:2c:c6:db:13:ff:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:D9:0F:EC:50:28:DD:CD:1A:75:22:47:6E:69:8A:BC:E9:BE:CC
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/1-eHZD-xQKN3NGnUiR25pirzpvsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.244.73.0-83.244.75.255
83.244.78.0/23
103.196.120.0/22
103.206.108.0/22
103.215.4.0/22
139.190.176.0/20
213.244.70.0-213.244.79.255
213.244.121.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ae:78:c5:66:66:ae:e3:e1:e5:a2:cc:4b:4d:da:62:16:35:
b5:2f:36:55:f3:f5:45:a7:0b:9a:a2:42:12:4f:86:a0:18:6e:
e5:1a:18:d2:9d:0f:01:2f:50:57:82:c9:45:fe:da:c2:b7:28:
5b:78:1a:cd:a8:69:8b:9d:bf:11:cd:4c:dc:c4:ed:90:92:c2:
59:79:ee:90:40:b1:7d:48:8b:9d:ca:55:70:4f:9a:2b:d7:49:
f1:26:13:af:71:24:8a:2b:93:e4:05:38:91:fe:34:e1:42:7f:
47:a2:e6:bc:cc:30:94:1f:42:a0:e8:e8:bd:fb:66:e3:ba:5a:
96:cb:69:c7:9c:d0:e8:c4:2a:7f:b8:73:c6:e4:b4:b1:10:18:
64:97:fb:ba:2a:ed:a1:99:85:df:06:df:04:80:13:9e:7c:11:
1a:ee:37:ef:f8:ef:ce:b1:a3:3e:8e:cd:4d:d3:a4:ea:29:e1:
61:fd:5d:92:1f:1b:79:f3:13:84:c3:95:81:fb:f4:d7:8f:a5:
41:c7:84:74:e1:6b:ee:f4:42:11:9a:1d:51:b7:1e:ea:3b:ee:
b3:46:be:d3:41:fd:2d:66:e9:0d:aa:19:fa:2b:2b:b2:a5:a2:
4e:4a:3b:18:da:33:02:3c:21:13:0e:79:5a:de:8c:aa:ae:fa:
3c:8b:f2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:03 2023 by rpki-client on console-fra.rpki-client.org